As a system administrator, we may want to keep track of authorized and unauthorized activity on your server. OSSEC may be the solution for this. It's an open source host-based intrusion detection system, which can be used for tracking server activity. When properly configured, OSSEC can perform log analysis, integrity checking, rootkit detection, time-based alerting, and many other things.
- Title Page
- Copyright and Credits
- Contributors
- Packt Upsell
- Preface
- Linux Security Problem
- Security policy
- Configuring server security
- Security policy – server security
- Defining security controls
- Checking the integrity of installation medium by using checksum
- Using LUKS disk encryption
- Make use of sudoers – configuring sudo access
- Scanning hosts with Nmap
- Gaining root on a vulnerable Linux system
- Missing backup plans
- Configuring a Secure and Optimized Kernel
- Local Filesystem Security
- Viewing files and directory details using ls
- Using chmod to set permissions on files and directories
- Using chown to change ownership of files and directories
- Using ACLs to access files
- File handling using the mv command (moving and renaming)
- Implementing Mandatory Access Control with SELinux
- Using extended file attributes to protect sensitive files
- Installing and configuring a basic LDAP server on Ubuntu
- Local Authentication in Linux
- Remote Authentication
- Network Security
- Security Tools
- Linux Security Distros
- Bash Vulnerability Patching
- Security Monitoring and Logging
- Viewing and managing log files using Logcheck
- Monitoring the network using Nmap
- Using Glances for system monitoring
- Monitoring logs using MultiTail
- Using system tools – whowatch
- Using system tools – stat
- Using System tools – lsof
- Using System tools – strace
- Real time IP LAN monitoring using IPTraf
- Network security monitoring using Suricata
- Network monitoring using OpenNMS
- Understanding Linux Service Security
- Scanning and Auditing Linux
- Vulnerability Scanning and Intrusion Detection
- Other Books You May Enjoy
OSSEC
-
No Comment
..................Content has been hidden....................
You can't read the all page of ebook, please click here login for view all page.